wanman-agent-matrix

SUSPICIOUS. The skill is broadly coherent with a local agent-orchestration purpose, and its main flows are local, but it grants substantial autonomous repo-action capability and uses a source-build install from a different org than the skill publisher. No clear credential harvesting or malicious exfiltration is evident, so this is better classified as medium security risk than malware.